General Preferences

If this option is enabled Vallum will apply rules to all running processes, including processes belonging to the root user.
If you want Vallum to ignore (and pass) all root processes uncheck this option. This option is bound to Vallum configuration.

XPC services are a technology used by macOS. An XPC is a “slave” app that makes connections to the network triggered by a “master” app, the one the user is actually interacting with.
For example when you open a web site using Safari the connections are not made by Safari itself but by com.apple.WebKit.Networking which is an XPC.
The very same XPC com.apple.WebKit.Networking is also used by Mail to display html messages, and by App Store to display the fancy Apple shop pages.
If the option is checked all connections made by XPC services will be considered by their responsible app. This means that a connections from com.apple.WebKit.Networking triggered by Safari will be displayed in notification alerts and in managed apps view like a Safari connection. The com.apple.WebKit.Networking connections triggered by Safari will also be matched against Safari rules, if any.
If com.apple.WebKit.Networking is triggered by a different app, let’s say App Store, Vallum will look for App Store app’s rules to find a match. So enabling this option has the effect of simplifying Vallum rules and gives a more granular control over the (few) apps that uses XPC.
If the option is disabled all XPC services will be considered like normal apps. We suggest to enable this option.
When upgrading to Vallum 1.2 or when importing a configuration from an old Vallum, the option may be disabled.
When you enable to option on an existing ruleset, Vallum by default removes all managed XPC services.
When this option is active you should never see XPC services like com.apple.WebKit.Networking in managed apps.
This option is bound to Vallum configuration. If you are unsure please keep this option selected.

Check this option if you want Vallum to display a popup message every time it switches configuration when detecting an macOS network location change.
This option is not bound to Vallum configuration.

Check this option if you want Vallum to verify managed apps signature validity and author. Vallum apps view will display special icons for each app. Please see the legenda clicking the blu "i" button in Vallum Apps view for more info.
This option is not bound to Vallum configuration.

Check this option if you want Vallum to hide some system binaries from managed apps list. Please note that this options simply hides apps icons, but apps are still managed and their rules enforced. This option is only useful if you want to reduce the number of displayed icons in managed apps view.

Check this option if you want Vallum to display a splash screen every time Vallum Agent starts.
This option is not bound to Vallum configuration.

Check this option if you want Vallum to check update automatically. Please note that Vallum considers itself a foreign app, so if you choose a restrictive strategy then you must explicitly allow Vallum to make connections to Vallumfirewall.com in order to check for updates availability.
This option is not bound to Vallum configuration.